last executing test programs: 240.763952ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='+8\n', 0x3) 207.346041ms ago: executing program 3 (id=4): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/rdma_cm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/rdma_cm/syz0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/rdma_cm/syz0/ports/1/default_roce_mode\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/100, 0x64) 73.854728ms ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/online\x00', 0x0, 0x0) close(r0) 73.673092ms ago: executing program 0 (id=6): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002) pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) 25.988513ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='.\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6) close(r1) syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0) nanosleep(&(0x7f0000000280)={0x2}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f0000000400)={0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x4, 0x7530, 0x20, 0x1, 0x40, 0x0, 0x0, 0x1, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22008' (ED25519) to the list of known hosts. [ 32.817572][ T5666] cgroup: Unknown subsys name 'net' [ 32.938158][ T5666] cgroup: Unknown subsys name 'cpuset' [ 32.940335][ T5666] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.884801][ T5666] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.700205][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.700942][ T5740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.703026][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.703221][ T5740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.703831][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.704295][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.705898][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.706059][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.706669][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.707284][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.724896][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.725340][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.733482][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.734366][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.734975][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.736469][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.739034][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.739738][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.740419][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.741527][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.366671][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.367096][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.367200][ T5734] bridge_slave_0: entered allmulticast mode [ 38.368647][ T5734] bridge_slave_0: entered promiscuous mode [ 38.381350][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.381391][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.381449][ T5743] bridge_slave_0: entered allmulticast mode [ 38.382285][ T5743] bridge_slave_0: entered promiscuous mode [ 38.384840][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.384912][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.385003][ T5743] bridge_slave_1: entered allmulticast mode [ 38.386416][ T5743] bridge_slave_1: entered promiscuous mode [ 38.387224][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.387315][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.387410][ T5734] bridge_slave_1: entered allmulticast mode [ 38.388600][ T5734] bridge_slave_1: entered promiscuous mode [ 38.447130][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.459892][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.459995][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.460062][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.460124][ T5744] bridge_slave_0: entered allmulticast mode [ 38.460825][ T5744] bridge_slave_0: entered promiscuous mode [ 38.462703][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.462799][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.462856][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.462907][ T5733] bridge_slave_0: entered allmulticast mode [ 38.463662][ T5733] bridge_slave_0: entered promiscuous mode [ 38.465218][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.465261][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.465318][ T5744] bridge_slave_1: entered allmulticast mode [ 38.466069][ T5744] bridge_slave_1: entered promiscuous mode [ 38.472908][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.478416][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.478479][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.478541][ T5733] bridge_slave_1: entered allmulticast mode [ 38.479241][ T5733] bridge_slave_1: entered promiscuous mode [ 38.510015][ T5743] team0: Port device team_slave_0 added [ 38.519926][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.522023][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.523693][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.524592][ T5743] team0: Port device team_slave_1 added [ 38.533753][ T5734] team0: Port device team_slave_0 added [ 38.540557][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.546316][ T5734] team0: Port device team_slave_1 added [ 38.551883][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.551892][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.551904][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.555056][ T5744] team0: Port device team_slave_0 added [ 38.572647][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.572657][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.572669][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.579973][ T5744] team0: Port device team_slave_1 added [ 38.592064][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.592073][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.592086][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.593526][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.593535][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.593547][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.605542][ T5733] team0: Port device team_slave_0 added [ 38.613888][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.613899][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.613911][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.622854][ T5733] team0: Port device team_slave_1 added [ 38.625650][ T5743] hsr_slave_0: entered promiscuous mode [ 38.626114][ T5743] hsr_slave_1: entered promiscuous mode [ 38.632562][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.632571][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.632585][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.663632][ T5734] hsr_slave_0: entered promiscuous mode [ 38.664094][ T5734] hsr_slave_1: entered promiscuous mode [ 38.664411][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 38.664458][ T5734] Cannot create hsr debugfs directory [ 38.664862][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.664871][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.664883][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.676963][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.676982][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.677001][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.723978][ T5744] hsr_slave_0: entered promiscuous mode [ 38.724511][ T5744] hsr_slave_1: entered promiscuous mode [ 38.725052][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 38.725069][ T5744] Cannot create hsr debugfs directory [ 38.755672][ T5733] hsr_slave_0: entered promiscuous mode [ 38.756184][ T5733] hsr_slave_1: entered promiscuous mode [ 38.756506][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 38.756517][ T5733] Cannot create hsr debugfs directory [ 38.994233][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.998821][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.999259][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.002887][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.004393][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.008668][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.009100][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.015070][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.048527][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.055862][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.056577][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.060728][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.067448][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.072485][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.075606][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.075699][ T5743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.076092][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.076181][ T5743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.088129][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.092619][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.144281][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.149238][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.150406][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.153444][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.154090][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.157137][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.162827][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.168724][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.180761][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.181926][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.237991][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.239339][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.241534][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.242193][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.244145][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.245038][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.247356][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.252715][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.259558][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.291719][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.311941][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.311994][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.313446][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.313496][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.329244][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.355027][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.363057][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.374531][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.374576][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.376613][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.376656][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.382862][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.407786][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.407831][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.421213][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.421300][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.494749][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.511893][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.531469][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.531555][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.545646][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.545690][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.693245][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.719531][ T5743] veth0_vlan: entered promiscuous mode [ 39.723446][ T5743] veth1_vlan: entered promiscuous mode [ 39.726537][ T5096] Bluetooth: hci0: command tx timeout [ 39.733978][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.761443][ T5743] veth0_macvtap: entered promiscuous mode [ 39.767778][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.772888][ T5743] veth1_macvtap: entered promiscuous mode [ 39.781583][ T5734] veth0_vlan: entered promiscuous mode [ 39.790816][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.791064][ T5734] veth1_vlan: entered promiscuous mode [ 39.802592][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.806097][ T5096] Bluetooth: hci2: command tx timeout [ 39.806291][ T5096] Bluetooth: hci3: command tx timeout [ 39.815789][ T5749] Bluetooth: hci1: command tx timeout [ 39.830839][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.848431][ T5733] veth0_vlan: entered promiscuous mode [ 39.848884][ T5734] veth0_macvtap: entered promiscuous mode [ 39.852016][ T5734] veth1_macvtap: entered promiscuous mode [ 39.861876][ T5733] veth1_vlan: entered promiscuous mode [ 39.864978][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.874578][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.893434][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.893446][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.916216][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.916325][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.916337][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.924416][ T5744] veth0_vlan: entered promiscuous mode [ 39.929307][ T5733] veth0_macvtap: entered promiscuous mode [ 39.951735][ T5733] veth1_macvtap: entered promiscuous mode [ 39.957011][ T5744] veth1_vlan: entered promiscuous mode [ 39.975963][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976011][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976044][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976075][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976106][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976137][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.976167][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.978969][ T5743] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.983304][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.984410][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.986066][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.987646][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.994130][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.994143][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.001085][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.001702][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.008753][ T5744] veth0_macvtap: entered promiscuous mode [ 40.018275][ T5744] veth1_macvtap: entered promiscuous mode [ 40.027088][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027115][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027135][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027164][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.027172][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.040773][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.044300][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.166315][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.166327][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.195067][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.195086][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.206064][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.206186][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.206427][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.207111][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.209807][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.209818][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.234732][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.234745][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.240787][ T5889] lo speed is unknown, defaulting to 1000 [ 40.251314][ T5889] lo speed is unknown, defaulting to 1000 [ 40.252358][ T5889] lo speed is unknown, defaulting to 1000 [ 40.255816][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.416940][ T5892] [ 40.418011][ T5892] ============================= [ 40.419641][ T5892] WARNING: suspicious RCU usage [ 40.421190][ T5892] syzkaller #0 Not tainted [ 40.423345][ T5892] ----------------------------- [ 40.423501][ T5835] lo speed is unknown, defaulting to 1000 [ 40.423641][ T5889] infiniband syz0: set active [ 40.423651][ T5889] infiniband syz0: added lo [ 40.429790][ T5892] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! [ 40.432205][ T5892] [ 40.432205][ T5892] other info that might help us debug this: [ 40.432205][ T5892] [ 40.434158][ T5889] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 40.434179][ T5889] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 40.434202][ T5889] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 40.449144][ T5892] [ 40.449144][ T5892] rcu_scheduler_active = 2, debug_locks = 1 [ 40.452491][ T5892] locks held by syz.0.6/5892: 1, last CPU#2: [ 40.455300][ T5892] #0: ffff888021a640a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x1cd/0xbf0 [ 40.458685][ T5892] [ 40.458685][ T5892] stack backtrace: [ 40.460608][ T5892] CPU: 2 UID: 0 PID: 5892 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.463358][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.466468][ T5892] Call Trace: [ 40.467526][ T5892] [ 40.468472][ T5892] dump_stack_lvl+0x100/0x190 [ 40.469984][ T5892] lockdep_rcu_suspicious.cold+0x4f/0xb2 [ 40.471747][ T5892] mas_start+0x621/0x7c0 [ 40.473134][ T5892] mas_walk+0x82/0x310 [ 40.474425][ T5892] ublk_try_buf_match+0x469/0x7e0 [ 40.474605][ T5889] RDS/IB: syz0: added [ 40.474728][ T5889] smc: adding ib device syz0 with port count 1 [ 40.474763][ T5889] smc: ib device syz0 port 1 has no pnetid [ 40.476837][ T5835] lo speed is unknown, defaulting to 1000 [ 40.479580][ T5889] lo speed is unknown, defaulting to 1000 [ 40.484612][ T5892] ? __kasan_slab_free+0x5f/0x80 [ 40.486184][ T5892] ? __pfx_ublk_try_buf_match+0x10/0x10 [ 40.487914][ T5892] ? lock_acquire+0x1d1/0x380 [ 40.489409][ T5892] ublk_init_iod+0x4a4/0x5b0 [ 40.490871][ T5892] ? __pfx_ublk_init_iod+0x10/0x10 [ 40.492493][ T5892] ? trace_contention_end+0x126/0x160 [ 40.494218][ T5892] ublk_setup_iod+0x145/0x2f0 [ 40.495690][ T5892] ? __pfx___mutex_lock+0x10/0x10 [ 40.497280][ T5892] ublk_dispatch_req+0x4e/0xb00 [ 40.498808][ T5892] ublk_cmd_tw_cb+0xbe/0x110 [ 40.500269][ T5892] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 40.501855][ T5892] ? __pfx_ublk_cmd_tw_cb+0x10/0x10 [ 40.503530][ T5892] tctx_task_work_run+0xabe/0xbf0 [ 40.505135][ T5892] ? __pfx_tctx_task_work_run+0x10/0x10 [ 40.506878][ T5892] ? lock_acquire+0x1d1/0x380 [ 40.508381][ T5892] tctx_task_work+0x7a/0xa0 [ 40.509828][ T5892] ? __pfx_tctx_task_work+0x10/0x10 [ 40.511465][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 40.513167][ T5892] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.514810][ T5892] task_work_run+0x150/0x240 [ 40.516290][ T5892] ? __pfx_task_work_run+0x10/0x10 [ 40.517901][ T5892] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.519541][ T5892] get_signal+0x1bd/0x21e0 [ 40.520962][ T5892] ? __pfx_debug_object_free+0x10/0x10 [ 40.522671][ T5892] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 40.524548][ T5892] ? __pfx_get_signal+0x10/0x10 [ 40.526091][ T5892] ? hrtimer_nanosleep+0x181/0x350 [ 40.527702][ T5892] arch_do_signal_or_restart+0x91/0x7a0 [ 40.529444][ T5892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 40.531370][ T5892] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 40.533037][ T5892] exit_to_user_mode_loop+0x139/0x700 [ 40.534716][ T5892] ? rcu_is_watching+0x13/0xc0 [ 40.536251][ T5892] __do_fast_syscall_32+0x59f/0x8b0 [ 40.537889][ T5892] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.539523][ T5892] do_fast_syscall_32+0x32/0x70 [ 40.541074][ T5892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.543083][ T5892] RIP: 0023:0xf7f24fec [ 40.544383][ T5892] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 40.546448][ T5892] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a2 [ 40.549041][ T5892] RAX: fffffffffffffdfc RBX: 0000000080001a00 RCX: 0000000000000000 [ 40.551509][ T5892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.554023][ T5892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.556510][ T5892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.559009][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.561479][ T5892] [ 40.608850][ T5889] lo speed is unknown, defaulting to 1000 [ 40.645532][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.698123][ T5889] lo speed is unknown, defaulting to 1000 [ 40.789818][ T5889] lo speed is unknown, defaulting to 1000 [ 40.796857][ T5883] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 40.798979][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.755601][ T5905] NFSD: Unable to initialize client recovery tracking! (-110) [ 41.755620][ T5905] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 41.755629][ T5905] NFSD: starting 90-second grace period (net f0000526) [ 41.805649][ T5749] Bluetooth: hci0: command tx timeout [ 41.885923][ T5749] Bluetooth: hci1: command tx timeout [ 41.895774][ T5749] Bluetooth: hci3: command tx timeout [ 41.895801][ T5749] Bluetooth: hci2: command tx timeout [ 43.013441][ T5883] comedi comedi5: could not switch to alternate setting 1 [ 43.013455][ T5883] usbduxfast 7-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 43.018295][ T5883] usb 7-1: USB disconnect, device number 2 [ 43.886389][ T5096] Bluetooth: hci0: command tx timeout [ 43.965798][ T5096] Bluetooth: hci1: command tx timeout [ 43.965820][ T5096] Bluetooth: hci2: command tx timeout [ 43.965856][ T5096] Bluetooth: hci3: command tx timeout [ 45.965650][ T5749] Bluetooth: hci0: command tx timeout [ 46.045834][ T5749] Bluetooth: hci2: command tx timeout [ 46.045857][ T5749] Bluetooth: hci1: command tx timeout [ 46.045867][ T5096] Bluetooth: hci3: command tx timeout